1.0.0-beta3

Bug-fix, hardening and performance release:
- Hardened post-purchase token validation: tokens are now bound to the order's
  verified email as well as the order id and expiry. API change —
  PostPurchaseTokenService::createToken() and ::verifyToken() each take a
  required $email argument.
- Performance: anonymous page requests no longer load the anonymous user account
  to check for a subscription.
- Performance: one subscription lookup per request instead of two (memoized,
  cleared on any subscription write).
- Performance: new refresh-throttle service caps how often a subscription's
  remote billing state is refreshed on the render path.
- Role sync for a subscription whose remote plan has no local plan entity now
  logs at WARNING instead of ERROR.
- subscription_manager:list-connectors no longer errors when no connectors are
  installed.
- Consolidated the duplicate "My Membership" account-menu links into one and
  sorted it to the top of the account menu.
- New update 10013 backfills entitlement roles for active subscribers missing a
  role granted by their active plan (additive and idempotent).